Vulnerability in Apple Iphone OS
CVE-2014-8130
The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tif_write.c, as demonstrated by tiffdither.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.038 (89.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 90th percentile — 89.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.038 · newest: 0.038 · change: 0.000
Affected products
- Apple Iphone OS
- Apple Mac OS X — versions 10.8.5, 10.9.5, 10.10.0
- Libtiff — versions 4.0.3
- Red Hat Enterprise Linux Desktop — versions 6.0, 7.0
- Red Hat Enterprise Linux Server — versions 6.0, 7.0
- Red Hat Enterprise Linux Server Aus — versions 7.2, 7.3, 7.4
- Red Hat Enterprise Linux Server Eus — versions 7.2, 7.3, 7.4
- Red Hat Enterprise Linux Server Tus — versions 7.2, 7.3
- Red Hat Enterprise Linux Workstation — versions 6.0, 7.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- support.apple.com/kb/HT204941 (Third Party Advisory)
- rhn.redhat.com/errata/RHSA-2016-1547.html (vendor-advisory, Third Party Advisory)
- www.securityfocus.com/bid/72353 (VDB Entry, Third Party Advisory, vdb-entry)
- github.com/vadz/libtiff/commit/3c5eb8b1be544e41d2c336191bc4936300ad7543 (Patch)
- lists.apple.com/archives/security-announce/2015/Jun/msg00002.html (vendor-advisory, Mailing List, Third Party Advisory)
- openwall.com/lists/oss-security/2015/01/24/15 (mailing-list, Mailing List)
- security.gentoo.org/glsa/201701-16 (vendor-advisory, Third Party Advisory)
- www.securitytracker.com/id/1032760 (VDB Entry, Third Party Advisory, vdb-entry)
- support.apple.com/kb/HT204942 (Third Party Advisory)
- www.conostix.com/pub/adv/CVE-2014-8130-LibTIFF-Division_By_Zero.txt (Third Party Advisory)
Frequently asked questions
- What is CVE-2014-8130?
- CVE-2014-8130 is a medium-severity vulnerability in Apple Iphone OS, classified under Divide By Zero. CVSS score: 6.5/10. Published 2018-03-12.
- How severe is CVE-2014-8130?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2014-8130 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.